Amazon Linux 2

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2026-3245 Related CVEs: CVE-2026-25727 CVE-2026-3336 CVE-2026-3337 CVE-2026-3338 CVE-2026-4428 CVE-2022-24713 CVE-2025-3416 CVE-2022-46174 Upstream summary: time provides date and time handling in Rust. From 0.3.6 to before 0.3.47, when user-provided input is […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2026-3259 Related CVEs: CVE-2026-27140 CVE-2026-27143 CVE-2026-27144 CVE-2026-32280 CVE-2026-32281 CVE-2026-32282 CVE-2026-32283 CVE-2026-32288  +12 more Upstream summary: SWIG file names containing 'cgo' and well-crafted payloads could lead to code smuggling and arbitrary […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2026-3147 Related CVEs: CVE-2026-21441 CVE-2025-66418 CVE-2025-66471 CVE-2025-8869 CVE-2025-50181 CVE-2024-47081 CVE-2001-1267 CVE-2007-4559  +12 more Upstream summary: urllib3 is an HTTP client library for Python. urllib3's streaming API is designed for the […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2026-3238 Related CVEs: CVE-2026-33952 CVE-2026-33977 CVE-2026-33983 CVE-2026-33984 CVE-2026-33985 CVE-2026-33986 CVE-2026-25941 CVE-2026-25942  +12 more Upstream summary: DoS via WINPR_ASSERT in rts_read_auth_verifier_no_checks NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-4v4p-9v5x-hc93 (CVE-2026-33952) DoS via WINPR_ASSERT in IMA ADPCM audio […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2026-3168 Related CVEs: CVE-2025-68160 CVE-2025-69420 CVE-2025-69421 CVE-2026-22796 CVE-2022-4304 CVE-2023-0215 CVE-2023-0286 CVE-2022-0778  +12 more Upstream summary: Writing large, newline-free data into a BIO chain using the line-buffering filter where the next […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2026-3214 Related CVEs: CVE-2026-31958 CVE-2025-67724 CVE-2025-67725 CVE-2025-67726 CVE-2026-35536 CVE-2025-47287 CVE-2023-28370 Upstream summary: Tornado is a Python web framework and asynchronous networking library. In versions of Tornado prior to 6.5.5, the […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2020-1411 Related CVEs: CVE-2019-15690 CVE-2018-15127 CVE-2026-32853 CVE-2026-32854 CVE-2018-7225 CVE-2020-29260 Upstream summary: Integer Overflow or Wraparound leads to Heap-based Buffer Overflow (CVE-2019-15690) Table of contents Symptom & Impact Environment & Reproduction […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2NGINX1-2026-011 Related CVEs: CVE-2026-27651 CVE-2026-27654 CVE-2026-27784 CVE-2026-28753 CVE-2026-28755 CVE-2026-32647 CVE-2023-44487 CVE-2021-23017  +9 more Upstream summary: When the ngx_mail_auth_http_module module is enabled on NGINX Plus or NGINX Open Source, undisclosed requests […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2026-3244 Related CVEs: CVE-2026-33416 CVE-2015-8540 CVE-2026-34757 CVE-2026-25646 CVE-2025-64505 CVE-2025-64720 CVE-2017-12652 Upstream summary: LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) […]